I think it's worth writing out `PASSWORD` to make it clear what this variable is for